From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,5a05d88755a62a0e X-Google-Attributes: gid103376,public From: kilgallen@eisner.decus.org (Larry Kilgallen) Subject: Validation vs. Certification (was: Asynchronous Transfer of Control) Date: 1996/10/21 Message-ID: <1996Oct21.101953.1@eisner>#1/1 X-Deja-AN: 190953129 x-nntp-posting-host: eisner.decus.org references: <32656457.1A76@csehp1.mdc.com> <54fnb1$5m7@ns1.sw-eng.falls-church.va.us> x-nntp-posting-user: KILGALLEN x-trace: 845907629/3190 organization: LJK Software newsgroups: comp.lang.ada Date: 1996-10-21T00:00:00+00:00 List-Id: In article <54fnb1$5m7@ns1.sw-eng.falls-church.va.us>, brashear@ns1.sw-eng.falls-church.va.us (Philip Brashear) writes: > Actually, ObjectAda for Windows did pass all the Annex D tests (except the one > Robert referred to), but we can't quite characterize that as being "validated > for Annex D". Under ACVC 2.0, implementations are validated (or not) without > regard to the Specialized Needs Annexes. If an implementation chooses to try > one or more of the SA Annexes, the results are reported in an attachment to the > certificate. There is no certification for an SA Annex. (The UNIX versions > of ObjectAda, validated under ACVC 2.0.1, did not attempt any of the Annex D > tests.) > > Yes, this is somewhat picky, but that's what validation and certification are > all about -- being picky. I am familiar with such rigorous use of terminology in the US Government program for rating the security features of operating systems (C2, B1, etc.). They use the terms evaluation, certification, etc. in an equally rigorous fashion but with a different set of meanings than those described for Ada. Perhaps some Ada folk in the US government could go around giving lectures on re-use in general rather than just in software. Larry Kilgallen